CIW 1D0-571 Online Practice Questions and Exam Preparation

CIW 1D0-571 Online Questions & Answers

• Question 31:

  Consider the following diagram:

  

  Which of the following best describes the protocol activity shown in the diagram, along with the most likely potential threat that accompanies this protocol?

  A. The ICMP Time Exceeded message, with the threat of a denial-of-service attack
  B. The SIP three-way handshake, with the threat of a buffer overflow
  C. The TCP three-way handshake, with the threat of a man-in-the-middle attack
  D. The DNS name query, with the threat of cache poisoning
  C. The TCP three-way handshake, with the threat of a man-in-the-middle attack

• Question 32:

  What is the primary use of hash (one-way) encryption in networking?

  A. Signing files, for data integrity
  B. Encrypting files, for data confidentiality
  C. Key exchange, for user authentication
  D. User authentication, for non-repudiation
  A. Signing files, for data integrity

• Question 33:

  The most popular types of proxy-oriented firewalls operate at which layer of the OSI/RM?

  A. Application layer
  B. Network layer
  C. Session layer
  D. Transport layer
  A. Application layer

• Question 34:

  Which of the following is the most likely first step to enable a server to recover from a denial-of- service attack in which all hard disk data is lost?

  A. Enable virtualization
  B. Contact the backup service
  C. Contact a disk recovery service
  D. Rebuild your RAID 0 array
  B. Contact the backup service

• Question 35:

  A CGI application on the company's Web server has a bug written into it. This particular bug allows the application to write data into an area of memory that has not been properly allocated to the application. An attacker has created an application that takes advantage of this bug to obtain credit card information. Which of the following security threats is the attacker exploiting, and what can be done to solve the problem?

  A. - Buffer overflow - Work with the Web developer to solve the problem
  B. - SQL injection - Work with a database administrator to solve the problem
  C. - Denial of service - Contact the organization that wrote the code for the Web server
  D. - Man-in-the-middle attack - Contact the company auditor
  A. - Buffer overflow - Work with the Web developer to solve the problem

• Question 36:

  You have determined that an attack is currently underway on your database server. An attacker is currently logged in, modifying data. You want to preserve logs, caching and other data on this affected server. Which of the following actions will best allow you to stop the attack and still preserve data?

  A. Pull the server network cable
  B. Shut down the server
  C. Back up the system logs
  D. Force an instant password reset
  A. Pull the server network cable

• Question 37:

  You are creating an information security policy for your company. Which of the following activities will help you focus on creating policies for the most important resources?

  A. Auditing the firewall
  B. Implementing non-repudiation
  C. Logging users
  D. Classifying systems
  D. Classifying systems

• Question 38:

  At the beginning of an IPsec session, which activity occurs during the Internet Key Exchange (IKE)?

  A. Determining the number of security associations
  B. Negotiating the authentication method
  C. Determining the network identification number
  D. Negotiating the version of IP to be used
  B. Negotiating the authentication method

• Question 39:

  Which of the following is a primary auditing activity?

  A. Encrypting data files
  B. Changing login accounts
  C. Checking log files
  D. Configuring the firewall
  C. Checking log files

• Question 40:

  Which of the following organizations provides regular updates concerning security breaches and issues?

  A. IETF
  B. ISO
  C. ICANN
  D. CERT
  D. CERT